JP2003255832A - Image processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image processor capable of protecting the secrecy of image data. <P>SOLUTION: This image processor provided with an image input means 501, an image processing means 502 and an image output means 509 is provided with an image data encrypting means 504 for encrypting the image data, an image data storing means (hard disk 506) for storing the image data, and an operating means 510 that can input a cryptographic key, and has a function for encrypting the image data with the cryptographic key inputted from the operating means 510 and storing the encrypted data in the image data storing means. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an image processing apparatus and, more particularly, to a technique for keeping image data confidential.

[0002]

2. Description of the Related Art In recent years, a complex system has been realized in which digital devices such as a plurality of copying machines are linked to perform processing by using a network. For example, when an instruction to read a document image is issued under the control of a computer, the composite system reads the document image from the image reading unit and stores the document image in the instructed hard disk of the image processing unit or the hard disk of the printing system sequentially. You can In addition, the composite system may perform image processing on the stored image data by the image processing means, output the image data from the print system, or store the image data in the hard disk for a necessary period. As a conventional technique related to the above, there is, for example, JP 2001-238035 A.

[0003]

However, in the above-mentioned conventional system, various kinds of image data are stored in the hard disk, and copy data of important confidential documents must be intentionally deleted in the hard disk. It may remain. On the contrary, in the present system, when an important confidential document is desired to be handled, there is a problem that the system cannot handle the important document simply because the copied data may remain in the hard disk. An object of the present invention is to provide an image processing device capable of maintaining confidentiality of image data.

[0004]

In order to achieve the above object, the invention according to claim 1 is an image processing apparatus including an image input means, an image processing means, and an image output means. A data encryption unit, an image data storage unit for storing the image data, and an operation unit capable of inputting an encryption key, and the image data is encrypted by the encryption key input by the operation unit, and the encryption is performed. Data is stored in the image data storage means. The invention according to claim 2 is the image processing apparatus according to claim 1, further comprising image data decoding means,
The image data read from the image data storage unit is decrypted by the encryption key input from the operation unit, and the image data is output by the image output unit. According to a third aspect of the invention, in the image processing apparatus according to the first or second aspect, a plurality of image inputting means,
The image processing means and the image output means are connected by a network, and a communication control means is provided, and the encrypted image data read from the image data storage means is
It is characterized in that it is transferred to another image processing means or image output means via a network. According to a fourth aspect of the invention, in the image processing apparatus according to any one of the first to third aspects, the image data storage means mounted on each image input means, image processing means, and image output means is removable. It is characterized by having a structure.

[0005]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the drawings. FIG. 1 is a block diagram of a system in which a copying machine as an image processing apparatus is network-connected. In the figure, 100 is a copying machine including an image input unit 101 and a printer unit 102. In addition, this copying machine 1
00 also includes a storage device capable of storing image data, a controller 103 including a communication control device for connecting to the network 105, and an operation unit 104 capable of key input. The controller 103, via the network 105, other copiers 110, printers 120, 130,
Alternatively, it is connected to the computer 140. Copier 11
0 has a controller 103 similar to the copying machine 100, and can send image data to the network 105 and receive image data from the network 105. The printers 120 and 130 also include the controller 103 and can output image data from the network 105. At this time, the printers 120 and 130 can also store the image data from the network 105 in the hard disk of the controller 103 and output the image data on paper according to the designation from the operation unit 104. In addition, the computer 140 takes in image data read from the image input unit 101 of the copying machine 100 to the hard disk via the network 105, performs image processing simulation, corrects tint, and the like, and then hard disk again. It can also be stored in. Further, it is possible to directly output from the printer unit 102 of the copying machines 100 and 110, output from the printers 120 and 130, and send to the controller 103 of each device and store in the hard disk.

FIG. 2 is a block diagram of the image input section. The image input unit 101 forming a part of the copying machine of the image processing apparatus will be described with reference to FIG. On the platen glass 203,
Documents 202 fed from the automatic document feeder 201 are sequentially set at predetermined positions. The original 202 set on the original platen glass 203 is exposed by an original illumination lamp 205 including a halogen lamp, for example. Reference numeral 206 denotes a plurality of scanning mirrors, which are housed in the optical scanning unit 204 and guide the reflected light from the original 202 to the CCD unit 207. CCD unit 20
Reference numeral 7 denotes an image forming lens 208 that forms an image of reflected light from the original 202 on the CCD, and an image pickup device 20 including the CCD.
It is composed of nine. The image signal output from the image sensor 209 is converted into, for example, 8-bit digital image data, and then input to the scanner image processing unit 210, where various image processes are performed. Reference numeral 211 denotes the scanner image processing unit 2
An image output I / F for transmitting the image data processed in 10 to the printer unit 102 and to the controller 103. FIG. 3 is a configuration diagram of the printer unit. The configuration of the printer unit 102 will be described with reference to FIG. Three
01 is a printer unit 102 of the copying machine 100 or 110, or a printer 120 or 1 having the same configuration as the printer unit 102.
The printer main body 30 is a generic name. A video interface 313 is an interface with the controller 103 having a printer I / F or a network I / F. The image data input from the video interface 313 is output to the printer image processing unit 314.
Then, image processing such as gradation processing is performed. Reference numeral 302 is a photosensitive drum, and 307 is a cleaner for cleaning the surface of the photosensitive drum 302. Reference numeral 312 denotes a charge eliminating lamp, which eliminates charge from the photosensitive drum 302 in preparation for image formation. Reference numeral 304 denotes a primary charger, which uniformly charges the photosensitive drum 302. Reference numeral 303 is a laser unit as an exposure unit. The laser unit 303 is composed of a semiconductor laser device or the like, and exposes the photosensitive drum 302 with a laser beam (LB) based on image data subjected to image processing to form an electrostatic latent image. 305 is a developing device,
Toner and developer are stored, and the photoconductor drum 302
Toner is sequentially attached to the electrostatic latent image formed above according to the charge amount. A sheet feeding unit 308 feeds the transfer sheet into the apparatus by driving each sheet feeding roller 310, and the writing timing with the image formed on the photosensitive drum 302 is set. 306 is a transfer charger,
The toner image developed on the photosensitive drum 302 is transferred to the fed paper. Reference numeral 311 is a conveyor belt, which conveys the sheet after the transfer process to the fixing device 309, and fixes the sheet by heat and pressure.

FIG. 4 is a block diagram of the controller. The controller 103 will be described with reference to FIG. As shown in FIG. 4, the main controller 103 is the hard disk 4
00 (including hard disk control unit) and communication control means 4
It consists of 01. The hard disk 400 uses the image data read from the image input unit 101 of the copying machine 100 as a temporary buffer for adjusting the output timing of the printer unit 102, or the image input unit 1
The storage device stores a plurality of read data read from 01, and also stores image data transmitted from the network. An ID No. is assigned to each of the stored image data files, and the file can be output, transmitted via the network 105, or deleted according to the designation from the operation unit 104. . Also at this time,
There is a communication control unit 401 for transmitting and receiving image data via the network 105. Main communication control means 40
Reference numeral 1 denotes an access to the network 105 for sequentially reading image data from the hard disk 400 and transmitting the image data via the network 105, or receiving image data from the outside via the network 105 and storing the image data in the hard disk 400. Is a means of controlling.

Next, the image processing apparatus according to the present invention will be described. According to the present invention, in a system having a storage device such as a hard disk as an image processing device, various kinds of image data are read by an image input device, stored in the storage device, and further output by an image output device. The purpose is to maintain confidentiality of highly confidential image data stored and stored in a storage device such as a hard disk. In other words, an unspecified person can easily output a highly confidential document left in the storage device as image data from the output device, or read the confidential document from another device on the network and read the contents. Is configured so that it can be prevented from leaking.

FIG. 5 is a functional block diagram of the image processing apparatus according to the first embodiment of the present invention. The configuration of the entire image processing apparatus will be described with reference to FIG. An image input unit 501 corresponds to the image input unit 101 shown in FIG. Fifty
2 is the image data input by the image input means 501,
It is an image processing means for performing various image processing for improving image quality or adjusting image quality. A page memory 503 temporarily stores the image data processed by the image processing unit 502. This page memory 503 outputs the image data stored in the memory a plurality of times to the subsequent stage without operating the image input unit 501 many times when it is desired to continuously output the same image data onto a sheet. By doing so, repeat copying can be realized. Also, the image input means 50
1 and the image output means 509 have different operating frequencies,
The page memory 503 can be used as those buffers. It can also be used as a buffer for timing adjustment when writing image data to the hard disk 506, which is a storage device. Reference numeral 504 is an encryption means. The encryption unit 504 encrypts the image data using the encryption key input from the operation unit 510 (corresponding to the operation unit 104 in FIG. 1). That is, the image data stored in the page memory 503 is sequentially read in a certain unit, sequentially encrypted, and transmitted to the subsequent stage. Reference numeral 505 is a compression means. The compression unit 505 is a unit for storing a larger amount of image data because the compression unit 505 stores the image data in the hard disk 506 used as a secondary storage device in the present invention. Reference numeral 506 is a hard disk. As described above, the hard disk 506 is used as the secondary storage device.
The hard disk 506, as an image processing apparatus, sequentially stores the image data input from the image input unit 501 as an image file, reads out an image to be output as necessary, or realizes a function such as electronic sorting. Used as a storage device for. Reference numeral 507 is an expansion means. The decompression unit 507 is a unit that decompresses the image data stored in the hard disk 506 after being compressed by the compression unit 505. Reference numeral 508 is a decoding means. The decryption unit 508 is a unit that decrypts the image data encrypted by the encryption unit 504. Decrypting the image data encrypted by the encryption unit 504 with the encryption key input from the operation unit 510 into the image data before being encrypted by the encryption unit 504 by using the same encryption key. You can The decoded image data is stored in the page memory 503 for each unit. Reference numeral 509 denotes an image output unit corresponding to the printer body 301 shown in FIG. The image output unit 509 sequentially reads the image data from the page memory 503, converts it into a laser beam as described above, and forms an electrostatic latent image on the surface of the photosensitive drum. Toner is attached to the electrostatic latent image by the developing device, and transferred to the sheet fed by the transfer charging device. The image transferred to the paper is fixed on the paper by the fixing device and output.

FIG. 6 shows an image input procedure until the image data is encrypted by the encryption key and written in the hard disk. S1 is a conditional branch indicating whether or not the encryption key is input. To enter image data, select Enter encryption key. S2 is the input of the encryption key. Here, the encryption key is input from the operation unit 510 installed in the image processing apparatus. S3 is a conditional branch that examines whether the input encryption key is appropriate. Here, it is determined whether the input encryption key does not violate a predetermined rule. For example, it is determined whether or not the conditions such as the number of digits of the input key, the range of values, and the presence of a predefined keyword are satisfied. If this determination is “inappropriate”, it is determined that the access is unauthorized and the encryption input S1 must be performed again. If it is determined to be “appropriate”, next, the reading S4 of the image data from the page memory 503 and the encryption S5 are executed. This encryption is performed based on the input encryption key, and the encryption result differs depending on the input encryption key. The encryption key indicates a value in a certain predetermined range, but the key itself is only in the operator's head,
The feature is that once encrypted, the original image cannot be restored unless it is the person who encrypted it. S6 is a compression process. This is a compression process for effectively using the storage device for storing. S7 is writing to the hard disk 506. By storing in the hard disk 506, it is possible to read it again when it is desired to output. The image data read by this series of procedures is encrypted and can be stored in the storage device. As a result, it is possible to prevent the important confidential data stored in the hard disk 506 from being read out by any method.

FIG. 7 shows an image output procedure for reading image data from the hard disk, decrypting it with an encryption key, and writing it in the page memory. Step S10 is a conditional branch indicating whether or not the encryption key is input. To enter image data, select Enter encryption key. S11 is the input of the encryption key. Here, the encryption key is input from the operation unit 510 installed in the image processing apparatus. S12 is a conditional branch that examines whether the input encryption key is appropriate. Here, it is determined whether the input encryption key does not violate a predetermined rule. For example, it is determined whether or not the conditions such as the number of digits of the input key, the range of values, and the presence of a predefined keyword are satisfied. If this determination is “inappropriate”, it is determined that the access is unauthorized, and the encryption input S10 must be performed again. If it is determined to be “appropriate”, then the hard disk 5
From S06, the image data read S13 and the decompression process S14 are performed. The next decryption S15 is decrypted based on the input encryption key, and the decryption result differs depending on the input encryption key. S16 is writing to the page memory 503. It can be temporarily stored in the page memory 503 and transmitted at the transfer rate of the image output device desired to output. The image data encrypted by the series of procedures and stored in the hard disk 506 can be decrypted and finally output to the image output device. As a result, it is possible to prevent the important confidential data stored in the hard disk 506 from being read out by any method.

FIG. 8 is a functional block diagram of an image processing apparatus according to the second embodiment of the present invention. The means 501 to 510 are the same as those described with reference to FIG. Reference numeral 811 in FIG. 8 is a selector. The selector 811 selects whether to finally output the image data stored in the hard disk 506 to the image output unit 509 or output to another image processing device via the network 105 under the control of the transmission control unit 812. To do. The output to the image output unit 509 is as described in the first embodiment. A case where image data is output via the network 105 will be described. As described above, when outputting from the network 105, the selector 8
11 is controlled in the direction of reading the encrypted image data stored in the hard disk 506. At this time, in consideration of the efficiency of the hard disk 506, the main image data is also compressed. This hard disk 5
The image data read from 06 is temporarily stored in the page memory 503 which is a temporary storage device. The transmission control means 812 controls the image data stored in the page memory 503 to be sequentially read at the timing of output to the network 105 and to be transmitted according to the protocol of the network 105. At this time, the image data transmitted via the network 105 has been encrypted by the encryption key input by the operator from the operation means 510. Further, compression processing is also performed in consideration of transmission efficiency of the network 105. As described above, since the transmitted image data is encrypted, even if the important confidential document stored in the hard disk 506 is illegally leaked to the outside via the network 105, the secret key will be stored as long as the encryption key is unknown. The content of the document is never understood. That is, it is possible to prevent the leakage of the important confidential document via the network 105.

FIG. 9 is a functional block diagram of an image processing apparatus according to the third embodiment of the present invention. The means 501 to 510 are the same as those described with reference to FIG. Reference numeral 912 in FIG. 9 is a selector. The selector 912 is a means for selecting whether to store the image data read from the image input means 501 in the hard disk 506 or store the image data in the hard disk 506 via the network 105 under the control of the reception control means 911. When the image data input from the image input unit 501 is stored in the hard disk 506, it is as described in the first embodiment. A case where image data is input via the network 105 will be described. The reception control means 911 uses the network 105 as described above.
When inputting image data from the network 105
Data reception processing is sequentially performed according to the above protocol. At this time, the image data on the network 105 is encrypted by the encryption key and transmitted by the image processing apparatus having the configuration shown in FIG. The hard disk 506 without decrypting this encrypted image data
To store. Therefore, the stored image data is encrypted by the encryption key not only on the network 105 but also in the state where the hard disk 506 is stored. Further, compression processing is also performed in consideration of transmission efficiency of the network 105. The image data read from the network 105 to the hard disk 506 is subjected to image expansion by the expansion means 507, converted into a decoded image by the decoding means 508, and can be output from the image output means 509 via the page memory 503. . At this time,
The decryption means 508 cannot decrypt correctly with the encryption key from the operation means 510 and if the decryption means 508 tries to output with an invalid encryption key. In this way, since the data on the network 105 and the received image data are encrypted, the important confidential document is transferred to the network 10.
5 or leakage from the hard disk 506 can be prevented. FIG. 10 is a block diagram of a copying machine having a removable hard disk. Even when an important confidential document is stored in the removable hard disk 506 as shown in FIG. 10, the encrypted image data is held in the hard disk 506 as described above, and the encryption key is known. The image data in the hard disk 506 cannot be read unless it is provided.

[0014]

As described above, according to the first aspect of the invention, in the image processing apparatus having the image input means, the image processing means, and the image output means, the image data encryption means for encrypting the image data. A function for storing image data, image data storage means, and operation means capable of inputting an encryption key, encrypting the image data with the encryption key input from the operation means, and storing the encrypted data in the image data storage means With the above configuration, even if there is an unauthorized access to the image data storage unit, it is possible to prevent leakage of confidential information from the image processing apparatus. According to the invention described in claim 2, in the image processing device according to claim 1, the image data decoding means is further provided, and the image data read out from the image data storage means by the encryption key inputted from the operation means. By having the function of decrypting the image data and outputting the image data by the image output means, only the operator who knows the encryption key can output the image data, and the leakage of confidential information from the image processing apparatus can be prevented. You can According to the invention described in claim 3, in the image processing apparatus according to claim 1 or 2, a plurality of image input means, image processing means, image output means are connected by a network, and a communication control means is provided. By having a function of transferring the encrypted image data read from the image data storage means to another image processing means or image output means via a network,
Even if there is an unauthorized access to the image data on the network, it is possible to prevent leakage of confidential information from the image processing apparatus. According to the invention of claim 4, claim 1
In the image processing apparatus according to any one of 1 to 3, the image data storage means mounted on each of the image input means, the image processing means, and the image output means has a removable structure, so that the image data storage Even if the means is illegally taken out, the internal data cannot be decrypted and viewed, so it is possible to prevent leakage of confidential information from the image processing apparatus.

[Brief description of drawings]

FIG. 1 is a configuration diagram of a system in which a copying machine as an image processing apparatus is network-connected.

FIG. 2 is a configuration diagram of an image input unit.

FIG. 3 is a configuration diagram of a printer unit.

FIG. 4 is a configuration diagram of a controller.

FIG. 5 is a functional block diagram of the image processing apparatus according to the first embodiment of the present invention.

FIG. 6 is a diagram showing an image input procedure until the image data is encrypted by the encryption key and written in the hard disk.

FIG. 7 is a diagram showing an image output procedure of reading image data from a hard disk, decrypting it with an encryption key, and writing it to a page memory.

FIG. 8 is a functional block diagram of an image processing apparatus according to a second embodiment of the present invention.

FIG. 9 is a functional block diagram of an image processing apparatus according to a third embodiment of the present invention.

FIG. 10 is a configuration diagram of a copying machine having a removable hard disk.

[Explanation of symbols]

501 image input means, 502 image processing means, 503
Page memory, 504 encryption means, 505 compression means, 506 hard disk, 507 decompression means, 50
8 Decoding means, 509 image output means, 510 operating means

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04N 1/44 B41J 29/00 Z F term (reference) 2C061 AP01 AP04 AQ06 AR01 AS02 CL08 HJ06 HQ12 HQ13 2C187 AC07 AD04 AE07 AF03 AG01 BF26 CC08 FA01 GD02 GD10 5C062 AA05 AA06 AA14 AA35 AB11 AB13 AB16 AB21 AB38 AB40 AB42 AC21 AC22 AC35 AE01 AF00 BC03 5C075 AA90 AB90 EE02 EE03 FF90 5J104 AA12 AA13 PA14

Claims (4)

[Claims] 1. An image processing apparatus comprising image input means, image processing means and image output means, image data encryption means for encrypting image data, image data storage means for storing the image data, and encryption key. The image processing apparatus is characterized in that the image data is encrypted by the encryption key input from the operation means, and the encrypted data is stored in the image data storage means. 2. The image processing apparatus according to claim 1,
An image characterized by further comprising image data decryption means, wherein the image data read from the image data storage means is decrypted by the encryption key inputted from the operation means, and the image output means outputs the image data. Processing equipment. 3. The image processing apparatus according to claim 1, wherein a plurality of image input means, image processing means, and image output means are connected by a network, and a communication control means is provided, and the image data storage means is provided. An image processing apparatus, characterized in that the encrypted image data read from the device is transferred to another image processing means or an image output means via a network. 4. The image processing apparatus according to claim 1, wherein the image data storage means installed in each image input means, image processing means, and image output means,
An image processing device having a removable structure.